Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →rudrendupaul/known-bad-skill
A synthetic fixture skill bundled with SkillGuard. It is inert -- it makes no real network or filesystem calls -- and exists only so SkillGuard's rule packs have real, safe text to match against. Do not install or run this in a real agent.
Passed 20 of 22 test cases with the skill, and 12 of 22 without it.
and 4 more in the full report
8 fixed12 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 8 test cases the skill fixed. Same model, same prompt, with and without the skill.
We want to test SkillGuard's CLI reporting format. What is the CLI package name used with `npx` to run the scan on the sample directory?
| Checked | Without skill | With skill |
|---|---|---|
| Names the CLI tool `skillguard-cli` | Missed | Passed |
The instructions your model reads when the skill loads.
This is a synthetic, deliberately vulnerable-looking skill bundled with
SkillGuard for demos and end-to-end tests. Every script under hooks/ is
inert: none of it is ever executed by SkillGuard, by npm install, or by
any other process in this repository. The domains referenced use the
.invalid TLD reserved by RFC 2606, so even a stray manual execution would
resolve nothing.
Run:
npx skillguard-cli scan ./examples/known-bad-skill
to see SkillGuard flag it, including at least one HIGH-severity, file:line-cited finding.
test cases passed, vs 12 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.